PT-2024-24126 · Unknown · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Graduate Tracer System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the admin/admin cs.php file. This allows for potential exploitation by injecting malicious SQL code. Recommendation...

Online Graduate Tracer System SQL Injection Vulnerability

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Sourcecodester Online Graduate Tracer System v1.0, which originates from the id parameter in admin/admincs.php, which is susceptible to SQL injectio...

CVE-2024-3455

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

PT-2024-26069 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laundry Management System version 1.0 Description: A critical issue has been found in the SourceCodester Laundry Management System. The laporan filter function of the file /application/controller/Transaki.php is affected. The...

PT-2024-26080 · Unknown · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laundry Management System version 1.0 Description: A critical issue has been found in the SourceCodester Laundry Management System. The laporan filter function in the /application/controller/Pengeluaran.php file is affected. Th...

PT-2024-26058 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laundry Management System version 1.0 Description: A critical issue affects the function laporan filter of the file /application/controller/Pelanggan.php. The manipulation of the argument jeniskelamin leads to sql injection. Th...

Prison Management System SQL Injection Vulnerability

Prison Management System is a prison management system developed by Carlo Montero. A SQL injection vulnerability exists in the SourceCodester Prison Management System version 1.0, which originates in the /Employee/deleteleave.php file and can be exploited for SQL injection attacks...

SourceCodester Laundry Management System security vulnerabilities

Laundry Management System is a laundry management system. A security vulnerability exists in SourceCodester Laundry Management System version 1.0, which stems from an SQL injection attack in the datakaryawan parameter of the /karyawan/laporanfilter file...

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from a SQL injection vulnerability in the parameter TunnelId in the file...

SourceCodester Laundry Management System security vulnerabilities

Laundry Management System is a laundry management system. A security vulnerability exists in SourceCodester Laundry Management System version 1.0, which is caused by an SQL injection attack in the dari/sampai parameter of the /application/controller/Pengeluaran.php file...

PT-2024-25993 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical vulnerability was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /admin/add ikev2.php and is caused by the manipulation...

CVE-2024-3424

A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/listscore.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack in the title parameter of the admin/listscore.php file...

WordPress Plugin REHub has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in...

Online Library System SQL Injection Vulnerabilities

Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which is caused by a SQL injection vulnerability in the useremail parameter of the admin/login.php file...

CVE-2024-3354

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/modusers/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2024-3352

A vulnerability has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/modcomments/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

PT-2024-23673 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering. This is a SQL Injection vulnerability. Recommendations: For DerbyNet versions 9.0 and...

PT-2024-25277 · Sourcecodester · Aplaya Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file booking/index.php. The manipulation of the log email and lo...

PT-2024-25306 · Sourcecodester · Sourcecodester Aplaya Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file admin/mod users/index.php. The manipulation of the id argument leads to SQL...